Add rar container

This puts rar in a rootless container with no access to the network of
the host.

containers/rar.nix

@@ -0,0 +1,55 @@
+{
+  containers.rar = {
+    autoStart = true;
+    privateNetwork = true;
+
+    bindMounts = {
+      "/home/user" = {
+        hostPath = "/home/user/containers/rar";
+        isReadOnly = false;
+      };
+    };
+
+    config = { pkgs, lib, ... }: {
+      programs = {
+        fish.enable = true;
+        neovim.enable = true;
+        starship.enable = true;
+      };
+
+      users = {
+        defaultUserShell = pkgs.fish;
+        mutableUsers = false;
+        allowNoPasswordLogin = true;
+
+        users.user = {
+          isNormalUser = true;
+          home = "/home/user";
+        };
+      };
+
+      environment = {
+        shells = with pkgs; [ fish ];
+
+        variables = {
+          TERM = "xterm-kitty";
+        };
+
+        defaultPackages = [ ];
+      };
+
+      environment.systemPackages = with pkgs; [
+        kitty
+        rar
+        unrar
+      ];
+
+      nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
+        "rar"
+        "unrar"
+      ];
+
+      system.stateVersion = "22.11";
+    };
+  };
+}

flake.nix

@@ -48,6 +48,7 @@
         ./games
         ./host
         ./terminal
+        ./containers/rar.nix
         {
           hardware.opengl.driSupport32Bit = true;